$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json) Hash identifier: iskPzVXSl2YnmJ5zf6mrAb9ceK+nFrh5atEOlVe/e88= Subject key identifier: C0:94:B6:2D:3F:AB:6F:64:81:36:B1:D0:0B:9A:03:D8:45:2E:B8:D6 Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Certificate serial: 0F62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft Manifest number: 189C Signing time: Fri 22 Aug 2025 17:42:28 +0000 Manifest this update: Fri 22 Aug 2025 17:42:28 +0000 Manifest next update: Fri 29 Aug 2025 17:42:28 +0000 Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: Y+nu/Vj8b2atLoFnPfpysJObeBlX9iFdnLxvsk8PhVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Validity Not Before: Aug 22 17:42:28 2025 GMT Not After : Aug 29 17:42:28 2025 GMT Subject: CN=68a8ac04-1542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:64:5b:20:c8:2b:fb:9e:aa:64:4f:40:d6: 52:49:d0:ce:25:70:6b:7c:c9:31:58:37:aa:6f:ba: 9f:ba:a5:15:59:a1:fb:f4:8a:22:ba:7e:43:8c:1e: e6:dc:90:42:1d:ad:98:a3:36:9f:4b:c5:04:6f:e1: d5:76:70:c2:4d:16:1f:b3:73:f4:e9:32:8b:6a:b1: 8e:b6:63:2c:c1:ab:50:be:68:86:83:ef:1e:d2:58: 89:9d:84:35:5a:b0:f3:13:26:6b:77:f0:59:c7:65: 43:0b:bc:4b:6b:6c:21:7c:26:33:54:68:7b:1b:41: 4d:05:ee:7a:90:23:7e:7e:34:d8:94:f9:b7:3e:0c: 10:43:e4:6f:d6:a6:4a:73:d2:94:f3:c5:b1:4a:18: 0f:f1:1f:8b:93:b8:d1:c3:1f:3c:49:57:21:79:59: 5e:6a:b2:21:da:10:ea:dd:39:f9:f0:fa:a7:85:47: d0:3e:ce:f5:52:59:ba:e9:49:ee:93:ac:cb:11:b3: 66:06:b3:92:87:ee:58:f3:fe:1b:db:92:d8:ab:e7: e7:ff:37:5c:8a:a6:f7:95:48:32:a0:a7:63:ba:95: 93:92:0f:8d:c5:46:e7:23:6d:64:9e:d9:3f:14:7e: 3e:97:ec:ac:9e:b6:5e:ef:c4:f0:a2:d3:48:e7:d9: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:B6:2D:3F:AB:6F:64:81:36:B1:D0:0B:9A:03:D8:45:2E:B8:D6 X509v3 Authority Key Identifier: keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1c:e2:d2:f8:9c:c1:4a:06:3a:c6:f9:ee:f9:05:ff:5a:67: 4c:d3:77:1b:16:0b:a2:13:6f:50:a4:5a:c8:c6:bd:55:3e:88: 16:d2:aa:04:7d:13:01:ab:84:89:28:c6:7d:9b:8d:7f:c6:1c: ce:04:28:04:5e:12:87:1d:47:2e:f7:ff:bc:73:d2:1e:27:e8: c1:9b:fd:9d:b9:2f:79:21:e3:10:0f:5f:09:67:5f:9b:4a:57: 47:6e:bd:10:2a:28:09:90:46:ef:4b:8f:ab:76:49:93:64:7e: 89:23:64:5c:4c:02:44:09:38:84:96:bc:46:0e:4b:5d:bf:d6: cb:68:e1:a6:5c:8b:9d:74:45:7f:cf:22:07:e7:96:20:f2:53: 7a:36:fb:2c:d2:b8:5a:7c:0e:70:79:e5:90:b9:db:20:54:39: 06:c6:4a:fa:67:84:f2:f8:d0:54:87:d7:b4:f3:97:97:6f:5b: 8f:06:34:a8:36:01:07:76:0f:60:43:bc:3d:30:ec:22:af:67: f8:6b:71:22:59:54:ed:b0:63:62:5b:58:41:dd:ff:c3:cc:c4: b2:09:b5:9a:d1:4f:93:29:08:10:a8:bb:82:66:fc:48:3c:ce: 14:4f:7a:51:fa:8c:be:7d:4b:a3:58:8d:fe:f0:67:f3:9c:af: 02:1b:c4:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4 NDhFRkJFMDQwHhcNMjUwODIyMTc0MjI4WhcNMjUwODI5MTc0MjI4WjAYMRYwFAYD VQQDEw02OGE4YWMwNC0xNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzylkWyDIK/ueqmRPQNZSSdDOJXBrfMkxWDeqb7qfuqUVWaH79Ioiun5DjB7m 3JBCHa2YozafS8UEb+HVdnDCTRYfs3P06TKLarGOtmMswatQvmiGg+8e0liJnYQ1 WrDzEyZrd/BZx2VDC7xLa2whfCYzVGh7G0FNBe56kCN+fjTYlPm3PgwQQ+Rv1qZK c9KU88WxShgP8R+Lk7jRwx88SVcheVlearIh2hDq3Tn58PqnhUfQPs71Ulm66Unu k6zLEbNmBrOSh+5Y8/4b25LYq+fn/zdciqb3lUgyoKdjupWTkg+NxUbnI21kntk/ FH4+l+ysnrZe78TwotNI59ltFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCUti0/ q29kgTax0AuaA9hFLrjWMB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2 Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0 eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqHOLS+JzBSgY6xvnu+QX/WmdM03cbFguiE29QpFrIxr1VPogW0qoE fRMBq4SJKMZ9m41/xhzOBCgEXhKHHUcu9/+8c9IeJ+jBm/2duS95IeMQD18JZ1+b SldHbr0QKigJkEbvS4+rdkmTZH6JI2RcTAJECTiElrxGDktdv9bLaOGmXIuddEV/ zyIH55Yg8lN6Nvss0rhafA5weeWQudsgVDkGxkr6Z4Ty+NBUh9e085eXb1uPBjSo NgEHdg9gQ7w9MOwir2f4a3EiWVTtsGNiW1hB3f/DzMSyCbWa0U+TKQgQqLuCZvxI PM4UT3pR+oy+fUujWI3+8GfznK8CG8RB -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:48 2025 by rpki-client